Behavioral task
behavioral1
Sample
15e76adf5343b6562f6ea0eb2a97314b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
15e76adf5343b6562f6ea0eb2a97314b_JaffaCakes118
-
Size
926KB
-
MD5
15e76adf5343b6562f6ea0eb2a97314b
-
SHA1
7f511a454142910688172131a1ca4eb03987fb2d
-
SHA256
89b5f95c5a77281154e5fb586bf16968525a3d2b3e98f15c0c21b13b2fd353ff
-
SHA512
05176251de591bbce767dd747ff513cb69b1167735d29b708bb500090e757e6c51a5f900aa95c27775908cadc3551800050b41661963c66b580760db7b9cb6c5
-
SSDEEP
24576:B/6psNO+ZwAkRnkQ+uMCi8x3A50WmApDFitK:N6pHVRnb+h8x3A579
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15e76adf5343b6562f6ea0eb2a97314b_JaffaCakes118
Files
-
15e76adf5343b6562f6ea0eb2a97314b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 664KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE